Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
c-ares: Data corruption when parsing domain names
published 6 months ago
Summary
A security update for c-ares fixes a bug that could cause data corruption when parsing domain names. This issue is particularly important for Windows users, as it affects IDN (Internationalized Domain Name) search domains. To ensure security, update to the latest version of c-ares.
Original advisory text
Security update for c-ares
This update for c-ares fixes the following issue
- CVE-2025-62408: use after free in read_answers() (bsc#1254738).
Changes for c-ares:
- c-ares 1.35.6:
* Ignore Windows IDN Search Domains until proper IDN support is
added
* Various bug fixes
- CVE-2025-62408: use after free in read_answers() (bsc#1254738).
Changes for c-ares:
- c-ares 1.35.6:
* Ignore Windows IDN Search Domains until proper IDN support is
added
* Various bug fixes
References
- https://bugzilla.suse.com/1254738 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2025-62408 URL
Timeline
Published7 May 2026
Updated9 May 2026
First seen9 May 2026
Sources
openSUSE-SU-2026:20698-1 · OSV
Track software like this
Free during beta